Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in pxinetd (npm)
- Aug 14, 2025
Malicious code in px-colors-design (npm)
- Aug 14, 2025
Malicious code in pwnschool (npm)
- Aug 14, 2025
Malicious code in pwnplug (npm)
- Aug 14, 2025
Malicious code in pwblogg (npm)
- Aug 14, 2025
Malicious code in pwavskeblunqyfth (npm)
- Aug 14, 2025
Malicious code in pvue.js (npm)
- Aug 14, 2025
Malicious code in pvue (npm)
- Aug 14, 2025
Malicious code in pvscience (npm)
- Aug 14, 2025
Malicious code in pvmrjygibflzoxtn (npm)
- Aug 14, 2025
Malicious code in pvm (npm)
- Aug 14, 2025
Malicious code in pvision (npm)
- Aug 14, 2025
Malicious code in pvilla (npm)
- Aug 14, 2025
Malicious code in puttiuw (npm)
- Aug 14, 2025
Malicious code in putri-wajit29-breki (npm)
- Aug 14, 2025
Malicious code in putri-tiwul78-breki (npm)
- Aug 14, 2025
Malicious code in putri-takokak40-breki (npm)
- Aug 14, 2025
Malicious code in putri-takokak26-breki (npm)
- Aug 14, 2025
Malicious code in putri-serimuka100-kuki (npm)
- Aug 14, 2025
Malicious code in putri-semur86-kuki (npm)
- Aug 14, 2025
Malicious code in putri-sego35-breki (npm)
- Aug 14, 2025
Malicious code in putri-rangginang49-sukiwir (npm)
- Aug 14, 2025
Malicious code in putri-ragi80-breki (npm)
- Aug 14, 2025
Malicious code in putri-moci2-breki (npm)
- Aug 14, 2025
Malicious code in putri-mieaceh25-sukiwir (npm)
- Aug 14, 2025
Malicious code in putri-martabak20-breki (npm)
- Aug 14, 2025
Malicious code in putri-liwet31-sukiwir (npm)
- Aug 14, 2025
Malicious code in putri-lengko97-breki (npm)
- Aug 14, 2025
Malicious code in putri-enting96-breki (npm)
- Aug 14, 2025
Malicious code in putri-empal25-breki (npm)
- Aug 14, 2025
Malicious code in putri-bakso28-breki (npm)
- Aug 14, 2025
Malicious code in putra-tomat25-breki (npm)
- Aug 14, 2025
Malicious code in putra-tapai28-sukiwir (npm)
- Aug 14, 2025
Malicious code in putra-sate8-sukiwir (npm)
- Aug 14, 2025
Malicious code in putra-ruwet45-breki (npm)
- Aug 14, 2025
Malicious code in putra-miemee86-sukiwir (npm)
- Aug 14, 2025
Malicious code in putra-miebogor100-sukiwir (npm)
- Aug 14, 2025
Malicious code in putra-kemplang69-breki (npm)
- Aug 14, 2025
Malicious code in putra-gepuk16-breki (npm)
- Aug 14, 2025
Malicious code in pustache (npm)
- Aug 14, 2025
Malicious code in pusqna (npm)
- Aug 14, 2025
Malicious code in pushko (npm)
- Aug 14, 2025
Malicious code in pushkey (npm)
- Aug 14, 2025
Malicious code in pushek-frontend (npm)
- Aug 14, 2025
Malicious code in pushapage (npm)
- Aug 14, 2025
Malicious code in pushadmin (npm)
- Aug 14, 2025
Malicious code in puresugar (npm)
- Aug 14, 2025
Malicious code in purejs-onepage-scroll (npm)
- Aug 14, 2025
Malicious code in purebmi (npm)
- Aug 14, 2025
Malicious code in puppeteer-superflare-eridanus-sagitta (npm)
Page 5803 of 7,293